Privacy Policy UK GDPR Compliant

Summary - Plain English

We sell second-hand camera gear we own. We only collect order details from PayPal/Stripe, messages you send, and anonymous analytics. We do not sell your data or store card numbers.

Who is the Data Controller?

PhotographyAttic, Sheffield, UK. Controller for UK GDPR / Data Protection Act 2018.
Contact Us

Information We Collect

• Order info – name, email, address, items from PayPal/Stripe.
• Messages – via contact/feedback forms.
• Analytics – Google Analytics anonymised.

How We Use – Lawful Basis

• Contract – fulfil orders & warranty.
• Legitimate Interest – reply, fraud prevention, improve site.
• Legal Obligation – HMRC invoices 6 years.
• Consent – newsletter if opt-in.

Payments – PayPal & Stripe

All payments off-site. We never see card numbers.

Cookies

Essential session, Google Analytics, PayPal/Stripe, Twitter/Trustpilot.

Your Rights

Access, Rectification, Erasure, Restrict, Object, Portability, Withdraw consent. Contact via form – reply within 1 month. ICO complaint right.

Contacting Us

Questions? Contact Us.

All gear tested and listed as working unless stated otherwise under the product description.